This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer (raw, json) Hash identifier: ZClyDwQltdjIG28nXiVNL+u8RCGbyAnM2zC6r1cytTs= Subject key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5F055C26D377710B730ED6E403B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47301 AS: 205520 IP: 194.88.203.0/24 IP: 195.182.34.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5f:05:5c:26:d3:77:71:0b:73:0e:d6:e4:03:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411952046770f54e8be1fd7d673132265ad70fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:2f:33:e7:67:69:a8:2a:8f:33:ae:1e:4b: 08:97:82:a4:73:bd:a0:ff:8b:e0:10:4c:02:bb:65: 6b:36:67:00:80:53:81:93:eb:34:0f:59:c3:56:17: 64:18:21:d3:94:72:b9:86:90:07:62:b6:3c:ce:b2: ad:d5:e4:2e:f6:0f:7a:1e:51:c5:56:9c:0e:52:63: a1:f4:60:fa:5e:57:b1:64:3b:e8:c9:06:4b:6f:90: 94:15:40:08:da:d6:e8:d0:d5:bd:ae:9d:37:dd:46: b4:32:0e:5c:fa:bc:d1:6b:f0:f4:49:d5:1b:30:c8: bc:9a:02:f2:be:68:72:5b:0d:c9:b4:af:c2:95:b5: 07:53:cb:17:57:00:e4:66:25:0a:ee:84:36:3e:26: ae:1e:0f:e4:85:2a:64:22:31:28:2d:8d:60:cf:7f: 22:62:8b:f9:f7:f7:56:a9:04:24:f3:44:f9:3c:51: c0:b3:a4:4f:3b:b0:fd:b5:7f:df:57:fc:e1:97:3e: 45:70:8c:d5:60:e5:82:8a:09:e2:07:22:2f:ba:e8: 13:83:09:cf:32:12:d2:3a:8a:80:5d:08:a8:0f:2d: 78:39:e7:76:4e:ca:f4:bd:bd:9f:f9:78:cd:22:30: 58:b7:dc:b2:60:1f:b6:b8:28:3b:a1:86:24:0f:de: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.203.0/24 195.182.34.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47301 205520 Signature Algorithm: sha256WithRSAEncryption 71:22:5b:60:cb:15:2d:36:da:9a:29:dc:8f:4d:05:b0:14:80: f0:a9:85:5a:42:75:0a:52:f2:41:46:f7:84:83:8f:76:c8:03: da:d9:3c:62:f3:5e:ab:b5:dc:e8:10:37:51:32:39:bb:1c:41: eb:c3:91:b0:20:c8:93:fd:4e:ac:6f:18:63:a7:dc:fe:1f:b8: 49:d6:0d:1c:b7:f4:c7:98:c8:e9:f3:10:f7:a0:67:ce:3d:b4: c5:4b:96:b7:57:88:aa:b1:99:1e:11:f6:c3:c5:f0:03:ba:ca: e0:42:1e:2e:7b:75:4f:e5:f1:dc:e9:08:49:51:ae:4f:6d:7a: e5:59:80:67:e1:ef:4b:4d:bc:40:4b:cc:b9:16:83:96:ec:5c: 5b:58:b9:8c:ca:a2:3c:d8:d6:b9:63:52:9d:75:22:44:b3:51: 66:41:fb:2b:f5:a8:67:75:19:6f:09:78:4c:c2:4a:6c:0c:0d: 3f:7a:97:1b:c9:f5:a1:17:68:50:37:3e:0c:91:63:0e:e1:bf: c4:a7:c0:cc:ad:96:4f:fd:8a:65:0d:c8:ca:78:d4:79:78:57: f2:f5:4f:2d:db:70:ee:76:93:03:de:54:af:08:b4:96:88:cf: 9c:31:f6:f2:1a:8c:8a:45:1b:23:4b:92:99:1c:b0:68:18:dd: bf:c6:7e:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt2618FXCbTd3ELcw7W5AO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE5NTIwNDY3NzBmNTRlOGJlMWZkN2Q2NzMxMzIyNjVhZDcwZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjwvM+dnaagqjzOuHksIl4Kkc72g /4vgEEwCu2VrNmcAgFOBk+s0D1nDVhdkGCHTlHK5hpAHYrY8zrKt1eQu9g96HlHF VpwOUmOh9GD6XlexZDvoyQZLb5CUFUAI2tbo0NW9rp033Ua0Mg5c+rzRa/D0SdUb MMi8mgLyvmhyWw3JtK/ClbUHU8sXVwDkZiUK7oQ2PiauHg/khSpkIjEoLY1gz38i Yov59/dWqQQk80T5PFHAs6RPO7D9tX/fV/zhlz5FcIzVYOWCigniByIvuugTgwnP MhLSOoqAXQioDy14Oed2Tsr0vb2f+XjNIjBYt9yyYB+2uCg7oYYkD96KwwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFEEZUgRncPVOi+H9fWcxMiZa1w+oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzM5NTBk NC05ZDcyLTRmZjAtODFkZS04YjkxYmM2MWU3YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMzk1MGQ0 LTlkNzItNGZmMC04MWRlLThiOTFiYzYxZTdjMy8xL1FSbFNCR2R3OVU2TDRmMTla ekV5SmxyWEQ2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwljLAwQAw7YiMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwC4xQIDAyLQMA0GCSqGSIb3DQEBCwUAA4IBAQBxIltgyxUtNtqaKdyP TQWwFIDwqYVaQnUKUvJBRveEg492yAPa2Txi816rtdzoEDdRMjm7HEHrw5GwIMiT /U6sbxhjp9z+H7hJ1g0ct/THmMjp8xD3oGfOPbTFS5a3V4iqsZkeEfbDxfADusrg Qh4ue3VP5fHc6QhJUa5PbXrlWYBn4e9LTbxAS8y5FoOW7FxbWLmMyqI82Na5Y1Kd dSJEs1FmQfsr9ahndRlvCXhMwkpsDA0/epcbyfWhF2hQNz4MkWMO4b/Ep8DMrZZP /YplDcjKeNR5eFfy9U8t23DudpMD3lSvCLSWiM+cMfbyGoyKRRsjS5KZHLBoGN2/ xn52 -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:11 2026 by rpki-client